Approved changes feed: RSS · Atom

cpe:2.3:a:joomla:joomla:1.0.2:*:*:*:*:*:*:*

part: a version: 1.0.2 update: *

VendorJoomla (6fa59c4b-5b62-59b9-bce0-735b9b6b6c51)
ProductJoomla (a68d2bfc-d726-582b-ab78-44558d52dbc2)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/joomla/joomla-cms purl2cpe 2026-06-01 10:18:16.289840
pkg:rpm/opensuse/joomla purl2cpe 2026-06-01 10:18:16.289842
pkg:sourceforge/joomla.mirror purl2cpe 2026-06-01 10:18:16.289844

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2009-3215 not_vulnerable 2026-06-08 04:51:32.873325 Details available
SQL injection vulnerability in IXXO Cart Standalone before 3.9.6.1, and the IXXO Cart component for Joomla! 1.0.x, allows remote attackers to execute arbitrary SQL commands via the parent parameter.
Published: 2009-09-16T19:00:00.000Z
Updated: 2024-08-07T06:22:23.155Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-0113 not_vulnerable 2026-06-08 04:51:07.675579 Details available
Directory traversal vulnerability in attachmentlibrary.php in the XStandard component for Joomla! 1.5.8 and earlier allows remote attackers to list arbitrary directories via a .. (dot dot) in the X_CMS_LIBRARY_PATH HTTP header.
Published: 2009-01-09T18:00:00.000Z
Updated: 2024-08-07T04:24:17.132Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-6299 vulnerable 2026-06-08 04:50:54.770312 Details available
Multiple cross-site scripting (XSS) vulnerabilities in Joomla! 1.5.7 and earlier allow remote authenticated users with certain privileges to inject arbitrary web script or HTML via (1) the title and description parameters to the com_weblinks module and (2) unspecified vectors in the com_content module related to "article submission."
Published: 2009-02-26T16:00:00.000Z
Updated: 2024-08-07T11:27:35.064Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-3228 vulnerable 2026-06-08 04:50:33.514684 Details available
Joomla! before 1.5.4 does not configure .htaccess to apply certain security checks that "block common exploits" to SEF URLs, which has unknown impact and remote attack vectors.
Published: 2008-07-18T16:00:00.000Z
Updated: 2024-08-07T09:28:41.659Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-3227 vulnerable 2026-06-08 04:50:33.513884 Details available
Unspecified vulnerability in Joomla! before 1.5.4 has unknown impact and attack vectors related to a "User Redirect Spam fix," possibly an open redirect vulnerability.
Published: 2008-07-18T16:00:00.000Z
Updated: 2024-08-07T09:28:41.773Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-3226 vulnerable 2026-06-08 04:50:33.513048 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-3225 vulnerable 2026-06-08 04:50:33.494807 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-7010 vulnerable 2026-06-08 04:49:30.152174 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-7009 vulnerable 2026-06-08 04:49:30.151680 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-7008 vulnerable 2026-06-08 04:49:30.149896 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-6834 vulnerable 2026-06-08 04:49:29.824917 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-6833 vulnerable 2026-06-08 04:49:29.824347 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-6832 vulnerable 2026-06-08 04:49:29.819701 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-3481 vulnerable 2026-06-08 04:49:09.488050 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-3480 vulnerable 2026-06-08 04:49:09.484078 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-1049 vulnerable 2026-06-08 04:48:56.101939 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-1048 vulnerable 2026-06-08 04:48:56.099535 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-1047 vulnerable 2026-06-08 04:48:56.097799 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-0303 vulnerable 2026-06-08 04:48:53.302397 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-3773 vulnerable 2026-06-08 04:48:42.140473 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-3772 vulnerable 2026-06-08 04:48:42.140109 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-3771 vulnerable 2026-06-08 04:48:42.139080 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.